Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: EdkgZBjFEfROdmPcgUXyYohy7ANRQKcInp2EUF7sYUo=
Subject key identifier: 28:F3:9C:48:F3:86:B8:39:10:3A:95:91:9D:11:24:AC:F6:15:44:6F
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 019A1BE2AD2489B1CC502E1CC7CB9BD333DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 0B6E
Signing time: Sat 25 Oct 2025 15:00:31 +0000
Manifest this update: Sat 25 Oct 2025 15:00:31 +0000
Manifest next update: Sun 26 Oct 2025 15:00:31 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: 0013dznGVc5Syi9zbwamTXRcfveg7xQ7siGAT0FVBrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:ad:24:89:b1:cc:50:2e:1c:c7:cb:9b:d3:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Oct 25 15:00:31 2025 GMT
Not After : Oct 26 15:00:31 2025 GMT
Subject: CN=28f39c48f386b839103a95919d1124acf615446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:25:46:70:ee:64:8a:2b:4f:f7:a4:5a:ca:
37:9e:ed:f4:c1:ba:9d:07:1a:f6:74:46:17:05:e1:
ab:1c:f9:f8:90:05:86:69:0a:f9:47:8f:2b:1c:26:
23:82:54:83:6e:8f:c7:49:f8:45:6a:72:72:03:07:
bb:d8:3f:9a:8d:a8:b1:cb:94:41:6a:1f:f0:73:a6:
9e:1b:78:d2:dc:13:f1:1c:c1:da:48:c8:bc:fc:89:
2f:2f:be:42:16:7f:02:3c:85:6d:32:e4:56:3f:41:
29:7c:db:2b:58:2a:2a:10:89:bd:93:9b:0a:75:75:
56:eb:12:3c:71:a3:95:5c:0b:62:83:02:5c:c9:ee:
d9:e1:9d:91:b4:1e:38:04:79:39:63:e6:ae:ba:67:
de:cf:24:3d:e0:b6:fa:de:3a:15:f4:dc:99:4b:da:
bb:94:f5:ec:e9:aa:03:26:d6:f3:ed:9f:9c:a1:88:
0c:f4:7d:e0:f5:47:f2:b7:25:42:a2:9a:2c:f5:16:
f2:44:30:99:28:5e:d5:f3:f7:55:8d:38:72:53:5a:
7f:e9:4c:50:85:b1:7c:1b:4a:67:61:7c:69:a2:99:
73:8a:9a:1d:b6:ce:33:c8:5d:5c:bf:3c:37:06:6a:
2d:65:e5:94:de:37:eb:2d:77:52:d1:0e:d2:91:32:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:9C:48:F3:86:B8:39:10:3A:95:91:9D:11:24:AC:F6:15:44:6F
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:f7:0a:66:82:93:45:2c:e5:a8:6b:78:c0:55:f4:57:67:
f4:69:26:cd:5b:7c:06:2f:46:22:91:eb:77:2c:c6:8b:07:d1:
0b:97:2a:d3:cf:a6:5e:63:4e:4d:96:10:61:db:75:14:fa:e5:
a5:5c:f8:43:1f:00:29:59:95:e0:66:7b:88:9a:93:08:2b:7f:
ec:21:fb:17:1a:c3:68:42:4c:d3:33:5c:88:ae:42:16:4a:dd:
5f:98:4e:ba:a6:46:09:8e:fa:b2:f6:a2:68:73:2b:dd:d7:3e:
3d:5e:6f:4d:05:92:39:3f:87:2e:5f:a1:c8:37:f6:32:ec:21:
e1:b0:fd:b8:de:23:c6:11:5f:9f:49:31:1b:03:1c:cc:d0:67:
b0:3b:76:c6:19:b4:98:89:f2:08:52:ba:fa:82:bd:cc:bf:cc:
27:31:86:82:4c:fd:a4:c1:0e:23:a4:4e:02:4c:ff:5b:86:fe:
46:14:fe:d3:99:b2:76:66:ee:69:49:08:82:58:82:32:b1:e0:
08:e7:dc:5e:f3:10:e2:7e:26:22:bc:4b:f6:78:53:92:90:fe:
f1:f3:25:e9:b3:8c:42:5c:8e:45:83:b3:51:1a:4a:62:9e:36:
08:e7:5a:c6:de:ef:76:b0:b3:3f:5b:e1:d8:9e:4a:29:45:66:
c9:0f:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:53:46 2025 by rpki-client